Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: gid6mBVxPJF9y3VDfOSEsoLWk+ZmpY4JbapLpMRLv20=
Subject key identifier: 2C:89:CB:0D:20:A0:4D:4D:CB:CA:34:5F:1D:40:3B:B1:77:57:AA:72
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 019A729383D5D6F9C796D4B86B6D992947F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: eIHfceiXCZFmWu/bnPbT7Zr14+2J3yDsg7R55QxrHzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:83:d5:d6:f9:c7:96:d4:b8:6b:6d:99:29:47:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=2c89cb0d20a04d4dcbca345f1d403bb17757aa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:13:4f:d4:3a:c9:5f:4a:32:aa:0a:74:68:
5c:97:0c:06:3d:a5:0e:00:c3:4c:80:4b:1a:01:ad:
ab:69:e5:2f:c4:7b:a1:ea:70:2e:12:98:9c:db:69:
c9:ee:3e:a6:63:8d:51:a7:ac:71:58:5b:86:54:73:
08:35:36:4f:fb:0b:41:9e:38:fb:b7:97:fb:17:38:
67:48:ec:38:36:f4:d1:61:14:c9:fe:13:9a:64:7a:
b2:37:d3:47:91:39:9f:0b:d2:ca:72:27:35:0b:2f:
ef:8b:c9:f2:a9:f3:f9:48:12:62:24:40:cc:cf:e7:
3c:21:5f:96:5b:43:5a:25:9b:e8:bf:d7:6d:8c:cb:
e7:a2:fd:cf:ed:7f:ae:da:73:22:a3:97:c3:72:6a:
39:59:de:3b:fe:11:73:a2:20:7c:58:bd:36:8e:d6:
1c:33:19:d6:ae:71:e9:49:50:ea:e8:a3:6b:2b:fb:
39:1b:c3:1a:6d:df:9c:29:40:36:71:33:cf:4c:7d:
a1:79:ea:f9:0a:32:ce:23:4d:cd:82:82:c2:c1:7b:
e9:4c:33:e1:7b:e4:77:81:13:b7:e7:c7:a8:84:d2:
09:de:38:ce:d2:f0:fa:fe:5d:b2:68:48:b5:d7:e8:
ad:32:2e:28:70:58:71:fb:57:46:c3:ab:5e:f4:44:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:CB:0D:20:A0:4D:4D:CB:CA:34:5F:1D:40:3B:B1:77:57:AA:72
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cd:63:79:78:17:2f:03:69:db:bc:50:68:ca:b6:9c:8a:bd:
82:b3:f3:24:38:04:3d:c1:ed:8f:25:28:cd:6a:25:09:be:e9:
36:bc:34:d7:ad:6c:9e:a3:fb:c5:ef:40:f1:53:66:c5:8c:2e:
4b:7e:14:f0:1b:88:ab:32:dc:2c:65:a8:98:c3:02:0f:c7:b3:
57:ad:b0:2d:8e:8d:76:f1:bd:55:4d:90:0a:dd:c4:dc:55:de:
4a:7b:9c:51:05:b0:f1:af:7e:55:e2:89:0d:4e:c3:fd:cb:39:
03:50:a9:89:e9:62:85:70:82:a6:5a:00:ba:80:c7:f1:82:26:
f5:47:e3:bb:d5:99:0c:58:a1:0b:4e:2e:7b:d8:19:5c:5f:96:
5c:25:24:28:f2:91:4f:d4:81:bf:a1:48:28:88:bf:58:c7:8c:
d5:4a:32:0a:fd:09:7f:08:6a:34:1c:b7:b6:7a:6a:1d:8b:7e:
e6:2d:f7:8d:af:b7:70:41:56:da:bf:26:f1:eb:c5:66:25:df:
b8:16:bd:ba:95:c5:4b:dd:af:2a:e6:56:c4:4a:d8:95:af:b3:
7d:d0:12:4a:d4:29:e3:94:53:10:b8:06:78:e2:57:c8:31:e7:
1e:e4:15:ed:f0:81:55:85:6e:6d:de:8a:86:6a:30:bf:6a:1f:
19:3d:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:22 2025 by rpki-client